Add NIST AI 600-1 (Generative AI Profile) framework plugin at stub depth - #218
Add NIST AI 600-1 (Generative AI Profile) framework plugin at stub depth#218joseruiz1571 wants to merge 1 commit into
Conversation
The toolkit's nist-ai-rmf plugin (GRCEngClub#213) brought AI RMF coverage and its changelog planned a Generative AI Profile companion. This adds it: nist-ai-600-1, scaffolded at Stub depth from the SCF crosswalk (general-nist-600-1-gen-ai-profile, 139 SCF controls -> 250 framework controls, counts verified against the club scf-api mirror), with marketplace registration and SCF API links on the club-canonical host. Follows the framework plugin guide: scaffold-generated structure, curated slug per sibling convention, no hand-maintained mappings, stub-depth TODOs retained for the Reference level-up.
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Greptile SummaryThe PR adds a Stub-depth NIST AI 600-1 framework plugin backed by the existing SCF gap-assessment flow.
Confidence Score: 4/5The PR appears safe to merge after addressing the non-blocking stale framework coverage documentation. The plugin metadata and assessment routing are internally consistent, but the generated coverage document will continue reporting NIST AI 600-1 as not started until it is regenerated. Files Needing Attention: plugins/frameworks/nist-ai-600-1/.claude-plugin/plugin.json and docs/FRAMEWORK-COVERAGE.md
|
| Filename | Overview |
|---|---|
| .claude-plugin/marketplace.json | Registers the new plugin with a matching source, name, version, and mapping-count description. |
| plugins/frameworks/nist-ai-600-1/.claude-plugin/plugin.json | Defines consistent Stub metadata, but adding the SCF identifier requires regenerating the framework coverage document. |
| plugins/frameworks/nist-ai-600-1/commands/assess.md | Routes assessment through the established gap-assessment convention using the correct SCF identifier. |
| plugins/frameworks/nist-ai-600-1/skills/nist-ai-600-1-expert/SKILL.md | Provides Stub-appropriate identity and routing context without reproducing normative framework text. |
| plugins/frameworks/nist-ai-600-1/README.md | Documents installation, Stub depth, metadata, and SCF references consistently with the manifest. |
| CHANGELOG.md | Records the new Stub plugin and its verified SCF mapping counts. |
Reviews (1): Last reviewed commit: "Add NIST AI 600-1 (Generative AI Profile..." | Re-trigger Greptile
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| "repository": "https://github.com/GRCEngClub/claude-grc-engineering", | ||
| "license": "MIT", | ||
| "framework_metadata": { | ||
| "scf_framework_id": "general-nist-600-1-gen-ai-profile", |
There was a problem hiding this comment.
Registering this SCF framework without regenerating docs/FRAMEWORK-COVERAGE.md leaves NIST AI 600-1 listed as not started and retains outdated coverage totals until a later automation PR is merged.
Knowledge Base Used: Framework Plugins and the SCF Crosswalk
|
The lychee failure is a transient 502 on an aicpa-cima.com link in us-sox/SKILL.md, outside this PR's diff. Both SCF API links added here return 200. A rerun should clear it. |
1 participant
Closes #217